Tag: google cloud

2 Attack Reports | 0 Vulnerabilities

Attack reports

The Mystery OAST Host Behind a Regionally Focused Exploit Operation

A long-running, attacker-operated OAST service on Google Cloud has been observed driving a focused exploit operation. The actor combines stock Nuclei templates with custom payloads to expand their reach. All observed activity targeted canaries deployed in Brazil, indicating a deliberate regional fo…

regional targeting

scanning infrastructure

Published: November 28, 2025

Linked vulnerabilities : CVE-2025-4428, CVE-2025-2611 (CVSS 9.3)

Downloadable IOCs: 9

WebDAV-as-a-Service: Uncovering the infrastructure behind Emmenhtal loader distribution - Sekoia.io Blog

The Emmenhtal loader, also known as PeakLight, operates in a memory-only manner, making it difficult to detect and analyse. It is primarily used to distribute other malicious payloads, including well-known infostealers that target sensitive information.

Published: September 19, 2024

Downloadable IOCs: 120

Click here to see more Attack Reports